Session id/number should only be visible to those who use it

[keevan]

e.g. for users with permission to upload and update bulk session attendance via csv

It currently displays it to students as well, which is unintended.